WIP: Support for multi-factor authentication through authenticator app #418#441

Closed

sam-glendenning wants to merge 87 commits intoindigo-iam:issue-418-mfa-supportfrom sam-glendenning:issue-418-mfa-support

+6,104-90

Commits on Sep 11, 2021

Merge pull request indigo-iam#416 from indigo-iam/release-v1.7.1
andreaceccanti
authored

Commits on Nov 16, 2021

Initial HTML and JS for enabling MFA on user account through dashboard
Sam Glendenning
committed

Commits on Nov 18, 2021

Button and modal for editing MFA settings now appears
Sam Glendenning
committed

Commits on Nov 19, 2021

Adding modal for enabling authenticator app
Sam Glendenning
committed
Adding models for IamTotpMfa and IamTotpRecoveryCode
Sam Glendenning
committed
Adding modal for disabling authenticator app
Sam Glendenning
committed

Commits on Nov 22, 2021

Merge branch 'iam-spring-update-oct-2021' of git://github.com/indigo-iam/iam into iam-spring-update-oct-2021
Sam Glendenning
committed
WIP: Increase the Cookie duration

rmiccoli
authored and
Sam Glendenning
committed
Allow config option in test client app to avoid disclosing tokens

andreaceccanti
authored and
Sam Glendenning
committed
Dynamic downscoping in test client app

andreaceccanti
authored and
Sam Glendenning
committed
Bumped version to v1.7.1

andreaceccanti
authored and
Sam Glendenning
committed
v1.7.1 changelog

andreaceccanti
authored and
Sam Glendenning
committed
More CHANGELOG tweaks

andreaceccanti
authored and
Sam Glendenning
committed
Initial HTML and JS for enabling MFA on user account through dashboard
Sam Glendenning
committed
Button and modal for editing MFA settings now appears
Sam Glendenning
committed
Adding modal for enabling authenticator app
Sam Glendenning
committed
Adding models for IamTotpMfa and IamTotpRecoveryCode
Sam Glendenning
committed
Adding modal for disabling authenticator app
Sam Glendenning
committed
Unifying controllers, adding auth app service
Sam Glendenning
committed
Merge branch 'issue-418-mfa-support' of https://github.com/sam-glendenning/iam into issue-418-mfa-support
Sam Glendenning
committed
Syncing branch with origin
Sam Glendenning
committed
Merging changes for updating Spring boot and Java version. Squashed commit of the following:
Sam Glendenning
committed

Commits on Nov 23, 2021

Making database schema changes for MySQL and H2
Sam Glendenning
committed
Ignoring .factorypath autogenerated file
Sam Glendenning
committed

Commits on Nov 24, 2021

Backend for adding TOTP secret to a user
Sam Glendenning
committed

Commits on Nov 25, 2021

Merge branch 'iam-spring-update-oct-2021' into issue-418-mfa-support
Sam Glendenning
committed
Merge branch 'iam-spring-update-oct-2021' of git://github.com/indigo-iam/iam into iam-spring-update-oct-2021
Sam Glendenning
committed
Merge branch 'iam-spring-update-oct-2021' into issue-418-mfa-support
Sam Glendenning
committed
Removing non-existent files
Sam Glendenning
committed
MFA secret and QR code now display on authenticator app enabling modal
Sam Glendenning
committed

Commits on Nov 26, 2021

Dynamic mfa settings menu, toaster notifications on successful operation
Sam Glendenning
committed
Adding license to files, adding basic input detection for MFA modals
Sam Glendenning
committed

Commits on Nov 29, 2021

Verification code now sends through post successfully
Sam Glendenning
committed
Adding TOTP validation for enabling and disabling authenticator app MFA
Sam Glendenning
committed
Autowiring QR generator and code verifier into AuthenticatorAppController
Sam Glendenning
committed

Commits on Nov 30, 2021

Database migrations for totp_mfa now in separate file
Sam Glendenning
committed
Adding tests for enabling and disabling TOTP MFA through IamAccountService
Sam Glendenning
committed

Commits on Dec 1, 2021

Adding tests for MFA settings and auth app controllers
Sam Glendenning
committed

Commits on Dec 2, 2021

Adding ROLE_PRE_AUTHENTICATED
Sam Glendenning
committed
Adding UUID for IamTotpMfa, fixing migration version numbers
Sam Glendenning
committed
Removing UUID from IamTotpMfa due to being unnecessary
Sam Glendenning
committed

Commits on Dec 3, 2021

Adding java docs for files in iam-login-service
Sam Glendenning
committed

Commits on Dec 6, 2021

Adding basic mfa login procedure
Sam Glendenning
committed
Merge branch 'indigo-iam:iam-spring-update-oct-2021' into iam-spring-update-oct-2021
Sam Glendenning
authored
Merge branch 'iam-spring-update-oct-2021' into issue-418-mfa-support
Sam Glendenning
committed

Commits on Dec 7, 2021

Improving TOTP input screen post-login, fixing Java 17 Docker upgrade issue
Sam Glendenning
committed

Commits on Dec 8, 2021

Adding error handling for MFA failure, fixing CSS bugs
Sam Glendenning
committed
Separating MFA verification controllers, adding "Back to login" button
Sam Glendenning
committed

Commits on Dec 9, 2021

Adding mechanism for looping through available factors of authentication on /iam/verify
Sam Glendenning
committed

Commits on Dec 10, 2021

Adding recovery code login procedure, backend for regenerating recovery codes
Sam Glendenning
committed

Commits on Dec 13, 2021

Fixing css bug that broke the btn-login class
Sam Glendenning
committed
Fixing css bugs with MFA verify button
Sam Glendenning
committed
Adding recovery code regeneration after use and webpage navigation
Sam Glendenning
committed

Commits on Dec 14, 2021

Adding ability to view and reset recovery codes
Sam Glendenning
committed
Fixing error message tests in AuthenticatorAppSettingsTests
Sam Glendenning
committed

Commits on Dec 15, 2021

Fixing enabling and disabing totpMfa tests for IamAccount
Sam Glendenning
committed

Commits on Dec 16, 2021

Adding tests for MfaVerify and AuthenticatorAppVerify controllers
Sam Glendenning
committed
Adding licence header
Sam Glendenning
committed

Commits on Dec 17, 2021

Adding tests for recovery code management controller endpoints
Sam Glendenning
committed
Adding tests on account service for adding recovery codes, fixing clone account method for cloning MFA secrets
Sam Glendenning
committed

Commits on Jan 6, 2022

Fixing submit button bug on dashboard modals
Sam Glendenning
committed
Recovery codes display to the user on MFA enabling
Sam Glendenning
committed

Commits on Jan 17, 2022

Adding amr claim in OIDC id_token
Sam Glendenning
committed

Commits on Jan 20, 2022

Removing unnecessary database migrations, extending authentication object to contain amr details
Sam Glendenning
committed

Commits on Jan 21, 2022

Fixing login bugs with MfaAuthenticationToken, extending authentication for mfa login
Sam Glendenning
committed
Renaming MfaAuthenticationToken to ExtendedAuthenticationToken
Sam Glendenning
committed
Renaming MfaAuthenticationFilter to ExtendedAuthenticationFilter
Sam Glendenning
committed

Commits on Jan 24, 2022

Moving db migrations to correct directory
Sam Glendenning
committed
Removing unneeded method to regenerate recovery codes
Sam Glendenning
committed
Adding creation time and update time to IamTotpMfa
Sam Glendenning
committed

Commits on Jan 27, 2022

Fixing migrations from IamTotpMfa creation and update time fields
Sam Glendenning
committed
Removing YubiKey option and all references in code
Sam Glendenning
committed

Commits on Feb 3, 2022

Demonstrating reading of amr from request parameters to /token
Sam Glendenning
committed

Commits on Feb 17, 2022

Authentication method reference claim now successfully appears in id_token for non-MFA users
Sam Glendenning
committed

Commits on Feb 24, 2022

OAuth2 client login flow now works for MFA users
Sam Glendenning
committed

Commits on Feb 25, 2022

Fixing login credential failure handling
Sam Glendenning
committed
Fixing TOTP verification process
Sam Glendenning
committed

Commits on Feb 28, 2022

Merging base branch and fixing conflicts
Sam Glendenning
committed

Commits on Mar 4, 2022

Adding recovery code verification to login flow
Sam Glendenning
committed
Merge branch mfa-db-migrations into issue-418-mfa-support
Sam Glendenning
committed
Merge branch 'v1.8.0' into issue-418-mfa-support
Sam Glendenning
authored

Commits on Mar 8, 2022

Adding comments, fixing assigned authorities bug
Sam Glendenning
committed
Merge branch 'issue-418-mfa-support' of https://github.com/sam-glendenning/iam into issue-418-mfa-support
Sam Glendenning
committed
Fixing license header in verify JSP
Sam Glendenning
committed

Commits on Mar 10, 2022

Fixing existing MFA tests, improving controller functionality
Sam Glendenning
committed
Adding license header for IamTotpMfaServiceTests
Sam Glendenning
committed

Commits on Mar 11, 2022

Fixing bugs with MFA verification
Sam Glendenning
committed